Manage members

After you have invited or added members to your organization, you can manage their accounts. You can modify profiles, reset passwords, disable multifactor authentication, enable Esri access, disable members, and delete members. Which actions you can perform depends on your privileges.

After you have added members to your organization, you can manage their accounts. Managing members includes modifying profiles, resetting passwords, disabling members, and deleting members. Which actions you can perform depends on your privileges.

Modify profile

Modify a member's profile when you want to update their descriptive information, thumbnail, profile visibility, language, units, or email address.

1. Verify that you signed in to your organization and have privileges to view member account information.
2. Click the My Organization button at the top of the site.
3. In the row of the member whose profile you want to modify, click the action button and click View Profile.
4. Click Edit Profile. You can now change the member's name, description, thumbnail, profile visibility, language, units, and email address.
5. Click Save to save your changes to the member profile.

Reset password

Administrators (only) can reset passwords for members. The system provides a temporary password that you must share with the member so they can sign in. After the member successfully signs in with the temporary password, they will be prompted to change their password. If the member is currently signed in when you reset their password, they are immediately signed out.

Note:

You cannot reset passwords for enterprise logins.

1. Verify that you are signed in as an Administrator of your organization.
2. Click My Organization at the top of the site.
3. In the row of the member whose password you want to reset, click the action button and click Reset Password.
4. Inform the member of their new, temporary password.

When the member signs in using the temporary password, they will be immediately prompted to change their password.

Disable member

If you are an Administrator of your organization or you have the correct privileges, you can disable members from your organization. If the member owns content or groups, you need to change ownership of the items to a different member before deleting the member.

Disabling a member prevents the member from consuming organizational resources. This can be useful while you move their items to a different member. Disabled members cannot sign in to the organization, consume organizational resources, create content, or administer the site. They are still members and count toward the number of users in your organization.

Once you've moved all the items, you can delete the disabled member from the organization. To learn more about how members are managed in the portal, see Managing access to your portal.

1. Verify that you are signed in to your organization and that you have privileges to disable members.
2. Click My Organization at the top of the site.
3. In the row of the member you want to disable, click the action button and click Disable Member.

Delete member

If you are an Administrator of your organization or you have the correct privileges, you can delete an individual member when you want to remove the account from your organization. You can also delete members in bulk using a command line utility. Only Administrators can delete other Administrators.

If the member owns content or groups, you need to change ownership of the items to a different member before deleting the member. You can do this individually for each member or in bulk using a command line utility.

If a member is deleted directly from the identity store, the member is retained in the portal. You'll need to delete the member manually in the portal. If the member owns content or groups, you need to change ownership of the items to a different member before deleting the member.

Member accounts that exist in the portal's built-in identity store are permanently deleted and cannot be recovered. Enterprise accounts are unregistered from the portal and retained in your identity store. If necessary, you can recover the enterprise account by adding it back to the portal.

Tip:

If you want to quickly assess which users in your organization are members of the portal, you can use the command line utility ListUsers to generate a text file that lists all the members in the portal. Use this utility to assess what users in your organization can be removed from the portal. The output text file can also be used as input to the DeleteUsers command line utility described below. For full instructions, see Listing members.

Delete a member using the portal website

1. Verify that you are signed in to your organization and that you have privileges to delete members.
2. Click My Organization at the top of the site.
3. In the row of the member you want to remove from the organization, click the action button and click Delete Member.
4. Click the Delete Member button in the pop-up to confirm you want to remove the member.

   Note:

   Only Administrators can delete other Administrators.

Delete members in bulk using a command line utility

Deleting members using the command line utility is appropriate if you need to remove a large number of members at once from your portal. You may do this periodically to keep the total membership count under control. You may also do this if you have recently upgraded your portal and must reduce the number of named users to the maximum allowed by your authorization file. For more information about this scenario, see Enforcement of named user licensing.

You'll use the DeleteUserscommand line utility that was installed with the software to remove members from the portal in bulk. The tool is located in the <Portal for ArcGIS installation location>\tools\accountmanagement directory. The tool takes a text file as input and must be run on the machine where the portal is installed.

Note:

The utility can only be executed by a built-in administrator account; you cannot use an enterprise administrator account. The built-in account you use can be the initial administrator account you set up when you configured the portal or another built-in account that has been granted administrator privileges. If you have deleted the initial administrator account and do not have any other built-in administrator accounts available, you will need to create one to execute the utility. For instructions, see the Built-in portal accounts section of Adding members to your portal.

1. Create a text file that contains the user names of members you want to delete from your portal. List each member's user name on a separate line, for example

   sarah
   robert
   james
   qing

   Note:

   You must specify the user name of the member. Do not use the full name of the member; the tool will ignore all entries that use the full name of the member. Also note that the user names you type in the text file must be in the same case as they are stored in the portal. You can run the ListUsers command line utility or check the My Organization page of your portal website to see in what case the user names are stored.

2. Save the text file.
3. Run the DeleteUsers command line tool by specifying your text file as the tool's input, for example, DeleteUsers --file c:\scripts\memberstodelete.txt.

   Tip:

   Be sure to use the correct case for command line options and file names.